Shame on you, stupid spammers.. DMARC Spoof Detection
🦋 Bluesky 🐘 Mastodon

DMARC Spoof Detection, Spain

Clear Clear Filter

This page shows DMARC authentication failures originating from Spain. Learn more about this data.

Spain accounts for 46 DMARC authentication failures observed by sh4meful over the observation window, sourced from 31 distinct IP addresses across 21 networks. This represents approximately 0.5% of total failure volume observed. Activity from Spain has held roughly steady over the last 30 days. The most active source is RIMA with 13 failures across 5 IP addresses.

Failures (Filtered)

46

IPs (Filtered)

31

Networks (Filtered)

21

Messages (Filtered)

75

Top Networks in Spain

Ten most active networks sourcing DMARC failures from Spain:

Network Organization Failures Distinct IPs Top City
RIMA — 13 5 Barcelona
ES-SBT-20140625 — 3 3 Vejer de la Frontera
Excom_Network — 2 2 Ibi
ES-MUNDITELECOM-20050711 — 1 1 Santa Cruz de Tenerife
ITE7-CUSTOMER-NET — 1 1 Puebla de Guzmán
ES-SBT-20120607 — 2 2 Valdepeñas
NET-161-22-40-0-0 — 4 1 Barcelona
OPERADORA-GREDOS-CUSTOMERS-1 — 1 1 Pueblonuevo de Miramontes
EUSKALTEL-CM — 3 1 Andoain
IPCOM-NET — 1 1 Ubrique

RIMA and ES-SBT-20140625 together account for 37% of failure volume from this country. Distribution across many networks is consistent with commodity spoofing infrastructure operating from this geography.

Failure Activity Over Time

Peak activity was observed in the week of August 3, 2026 with 6 failures recorded. Activity in the most recent 30-day window held roughly steady compared with the prior period (11 vs 10 failures).

Regional Context

Compared with peer geographies in Southern Europe, Spain's failure volume is above the regional median. Countries in this region collectively contributed 2% of failures observed.

Failures

Showing 1-10 of 46 failures, affecting 75 messages
Date ▼ Source IP Country City Network Messages
9/1/2026 193.57.162.176 ES Spain Puebla de Guzmán ITE7-CUSTOMER-NET 4
8/31/2026 88.2.196.77 ES Spain Barcelona RIMA 2
8/30/2026 88.2.196.77 ES Spain Barcelona RIMA 2
8/27/2026 88.2.196.77 ES Spain Barcelona RIMA 1
8/25/2026 88.2.196.77 ES Spain Barcelona RIMA 1
8/24/2026 88.2.196.77 ES Spain Barcelona RIMA 1
8/14/2026 88.2.196.77 ES Spain Barcelona RIMA 1
8/13/2026 88.2.196.77 ES Spain Barcelona RIMA 1
8/6/2026 185.19.212.157 ES Spain Pueblonuevo de Miramontes OPERADORA-GREDOS-CUSTOMERS-1 3
8/4/2026 185.62.20.170 ES Spain Vejer de la Frontera ES-SBT-20140625 3

What This Means

Country-level patterns don't imply that mail from Spain is inherently malicious. Many failures reflect misconfigured legitimate senders, forwarded messages that break authentication, or automated infrastructure operating without authorization. Domain owners investigating a specific failure should look at the source IP and network details rather than the country alone. Our DMARC guide explains how to interpret these signals in your own reports.